South Africa

A major electricity supplier in South Africa's largest city has suffered a ransomware attack. The ransomware shut down IT systems, affecting more than 250,000 people through regional blackouts, and prevented customers from purchasing prepaid electricity.

Shoprite has been hit by a ransomware attack. On June 10 the company disclosed that they suffered a security incident. RansomHouse, a ransomware gang, has claimed responsibility for the cyberattack, which compromised customer data in Eswatini, Namibia and Zambia. Shoprite said the data breach “included names and ID numbers but no financial information or bank account numbers.”

In messages posted on RansomHouse’s Telegram channel and seen by TechCrunch, the gang, which is said to be targeting companies with weak security, claimed to have obtained 600 gigabytes of data from Shoprite. It said to have collected personal data that was “in plain text/raw photos packed in archived files, completely unprotected.”

Transnet, a state-owned South African rail, port and pipeline company, suffered a cyberattack July 22.and has been forced to halt operations. Transnet declared force majeure at 4 container terminals. Container shipment processing was delayed for 7 days. .

WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.

WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.

Chemical company, Omnia Holdings, suffered a cyber attack on its IT infrastructure, officials said.
Omnia Holding Limited is a holding company for a group of companies that produces and supplies fertilizer to the agricultural industry, explosives to the mining industry and industrial chemical products. The group’s operations are located in South Africa, Ghana, Kenya, Mauritius, Tanzania, Zimbabwe and Zambia. The company is listed on the Johannesburg Stock Exchange (JSE)
The company said it was alerted to abnormal activity on its network on March 12 and specialist teams promptly began investigating the incident.